On Thu, Aug 18, 2011 at 20:32, Murray W <mursem...@gmail.com> wrote: > What do you want to do, monitor a site and if some app is hitting it > too frequently automatically report it to Google for abusing *your* > ToS?
terms-of-service > > (Not sure what you mean by ToS, must be a AppEngine code word.) > Actually I do monitor my site. Doesn't everyone today monitor > for pharmaceutical spam, SQL injection attempts and your classical > bruteforce attacks? Probably. > I'm not worry about an application hitting my sites. I see allot of good > appid:'s . It's when an AppEngine application is used like an open proxy to > spam sites. Then the scripts brings the hammer down. Yes, I personally very much agree with you on this. All of the proxy sites on App Engine are extremely annoying, especially when they are 'spoofing' legitimate sites on App Engine. Excellent setup for a phishing attack. > Aren't your applications a SaaS? (Software as a Service) > Before you think, read what I have to say. > If one of my sites picks up 20 or 30 spam posting attempts from a single > AppEngine that's only my site. Add a few million other sites to the mix and > your application just cost you a bundle in bandwidth to allow a spammer to > use. Not my bandwidth but your applications bandwidth. > I've read the "DDoS" and "Reached Quota" forum posts and my guess it's just > spammers. They tend to flock 50 or so at a time averaging from what I detect > 2 to 5 posts per second. > I'm thinking if you all found a way to either get live abuse reports or > updates it might actually save you money. > I'm just trying to help you all, but if you have it handled then I'll just > watch the apps eat your bandwidth and get posted on popular blacklists. > Today's list includes: > appengine-google; (+http://code.google.com/appengine; appid: domaintraker) > IP: 209.85.224.84 > Contents: http alonsoalic3 . splinder . com Percocet Dose (blah blah blah) > It's only spam to me. > I wonder how much bandwidth that app is costing: > Remember, I'm only one in a million websites and it's clear I'm the only one > to bring up an issue that is costing you money. > The appid listed above was reported by one site I monitor: > First seen: Report Date: 8/7/2011 4:32:41 AM last visited Report Date: > 8/18/2011 1:33:25 AM > Add 20 million and that's some good bandwidth for the appid: domaintraker. > I'm sure there is a way to create a sub-routine to monitor POST / GET > requests from your apps. > I would believe that a "Human" wouldn't be sending "Post and Get" requests > at 4 or more per second. > I'd be glad to work with those that are willing to work on a application. > I've opened up the NOC reports for visitors this week. You can find the > Google IPs and Amazon listings. Look for the APPID: notice to see how often > this happens. > XCtM Project v2 > > Good luck and thanks for answering my questions. > > -- > You received this message because you are subscribed to the Google Groups > "Google App Engine" group. > To view this discussion on the web visit > https://groups.google.com/d/msg/google-appengine/-/ZuOOAgJ6VuUJ. > To post to this group, send email to google-appengine@googlegroups.com. > To unsubscribe from this group, send email to > google-appengine+unsubscr...@googlegroups.com. > For more options, visit this group at > http://groups.google.com/group/google-appengine?hl=en. > -- You received this message because you are subscribed to the Google Groups "Google App Engine" group. To post to this group, send email to google-appengine@googlegroups.com. To unsubscribe from this group, send email to google-appengine+unsubscr...@googlegroups.com. For more options, visit this group at http://groups.google.com/group/google-appengine?hl=en.
